Proposed CLI
Server site
set service stunnel server app1 listen-address 192.0.2.1 set service stunnel server app1 listen port 443 set service stunnel server app1 connect address 127.0.0.1 set service stunnel server app1 connect port 9999 set service stunnel server app1 ssl ca-certificate set service stunnel server app1 ssl certificate xxx set service stunnel server app1 ssl key xxx set service stunnel server app1 psk secret set service stunnel server app1 protocol socks
The client site
set service stunnel client app1 connect address <192.0.2.1|example.com> set service stunnel client app1 connect port 443 set service stunnel client app1 listen port 9999 set service stunnel client app1 ssl certificate xxx